Title: Quiz 5
Course: CTS 2307 Windows Management > Section: Module 5

Q: When using TPM with BitLocker, what mode does not protect the boot environment and requires that the user provide a USB flash drive with the keys before the computer can boot into Windows?
- TPM-SmartCard mode
- TPM-PIN mode
- TPM-Startup Key mode
- No TPM mode
A: No TPM mode

Q: When using TPM with BitLocker, what mode requires that the user present a valid certificate via a secure method before the computer will boot into Windows?
- TPM-SmartCard mode
- TPM-PIN mode
- TPM-Startup Key mode
- No TPM mode
A: TPM-SmartCard mode

Q: When using TPM with BitLocker, what mode requires that the user provide a USB flash drive with the keys before the computer can boot into Windows?
- TPM-SmartCard mode
- TPM-PIN mode
- TPM-Startup Key mode
- No TPM mode
A: TPM-Startup Key mode

Q: When using TPM with BitLocker, what mode can use Group Policy to enforce the usage of a strong password that must be entered before the computer can boot into Windows?
- TPM-SmartCard mode
- TPM-PIN mode
- TPM-Startup Key mode
- No TPM mode
A: TPM-PIN mode

Q: What is the net effect of the following combination of share and NTFS permissions when the share is accessed over the network? Share permission (Share tab)-Sales group: Full Control; NTFS permission (Security tab)-Sales group: Read & Execute, Modify, Write.
- Members of the Sales group will be able to take ownership of files and edit content, but not delete files
- Members of the Sales group will be able to edit content and delete files
- Members of the Sales group will be able to take ownership of files, edit content, and change NTFS permissions
- Members of the Sales group will be able to edit content, delete files, and change NTFS permissions
A: Members of the Sales group will be able to edit content and delete files

Q: To use EFS on a file or folder, which of the following conditions must you first meet? (Choose all that apply.)
- You must be using an NTFS volume
- You must not be using a storage pool
- You must decompress the file or folder first
- You must be in an Active Directory domain
A: You must be using an NTFS volume; You must decompress the file or folder first
If wrong: To use EFS, you must store your files on an NTFS volume. If you are using Windows compression on the file/folder, you have to decompress it before you can encrypt it.

Q: Which of the following statements are true concerning share permissions? (Choose all that apply.)
- For drives formatted with the NTFS file system, share permissions are not available.
- For drives formatted with the FAT/FAT32 file system, share permissions are the only option available.
- They determine the type of access that others will have to the folder when they connect to it over the network.
- They apply whether the user attempts to access them over the network or locally.
A: For drives formatted with the FAT/FAT32 file system, share permissions are the only option available.; They determine the type of access that others will have to the folder when they connect to it over the network.
If wrong: Share permissions are set for folders when they are shared in workgroups and domain-based networks and are only associated with the folder. They determine the type of access that others will have to the folder when they connect to it over the network. For drives formatted with the FAT/FAT32 file system, share permissions are the only option available.

Q: What Group Policy setting will you need to use to disallow the usage of portable media devices on your domain's computers?
- Prevent usage of removable devices
- Prevent installation of removable devices
- Block transfer to portable devices
- Block installation of portable storage
A: Prevent installation of removable devices

Q: How can you best track the usage of removable storage devices on your domain's computers?
- Use System Center Configuration Manager to send an alert when removable storage is used
- Configure Group Policy to send an email alert when removable storage is used
- Use System Center Operations Manager to send an alert when removable storage is installed
- Configure audit policies for removable storage in Group Policy
A: Configure audit policies for removable storage in Group Policy

Q: What will you be prompted to do the first time you encrypt a file or folder using EFS?
- Set your one-time password
- Back up your file encryption certificate and key
- Create an initialization vector for the private key
- Select an EFS Recovery Agent
A: Back up your file encryption certificate and key

Q: In an Active Directory domain environment, what account is the EFS Recovery Agent?
- The local Administrator on each domain controller
- The local Administrator on each computer
- The Domain Administrator
- The Enterprise Administrator
A: The Domain Administrator

Q: What happens to a computer upon startup if the TPM is missing or the integrity of the files is in question?
- It will shut down until booted with the recovery key on a USB flash drive inserted prior to boot
- It will boot into Safe Mode and run the BitLocker Recovery Wizard
- It will go into Recovery mode and wait for you to provide the recovery password or key
- It will prompt for a domain Key Recovery Agent to enter credentials to decrypt the disk
A: It will go into Recovery mode and wait for you to provide the recovery password or key

Q: When using BitLocker on domain-based computers that use the TPM-PIN mode, what conditions must be met for the system volume to automatically unlock without needing the user to enter a PIN? (Choose all that apply.)
- TPM is enabled
- The computer is connected to the domain over a wired connection
- A Network Unlock server is installed on a Windows Deployment Services server
- The TPM User certificate template has been published in Active Directory
A: TPM is enabled; The computer is connected to the domain over a wired connection; A Network Unlock server is installed on a Windows Deployment Services server
If wrong: When using BitLocker on domain-based computers that use the TPM-PIN mode, the system volume will automatically unlock without needing the user to enter a PIN if the following conditions are met: TPM is enabled; The computer is a member of the domain and is currently connected to it over a wired connection; A Network Unlock server (used to distribute the Network Unlock certificates to clients, which then use them to create the network unlock keys) is installed on a Windows Deployment Services server.

Q: What options do you have for implementing BitLocker Drive Encryption? (Choose all that apply.)
- Encrypt documents only
- Encrypt startup files only
- Encrypt entire drive
- Encrypt used disk space only
A: Encrypt entire drive; Encrypt used disk space only
If wrong: When encrypting a fixed disk, storage pool, or removable media, there are two options: Encrypt used disk space only: This option encrypts only the part of the drive that currently has data stored on it; Encrypt entire drive: This option encrypts the full volume and offers more security because it will encrypt areas that contain data that has been deleted but may still be retrievable from the drive.

Q: When you encrypt the drive where the Windows operating system is installed, BitLocker must store the keys it uses to encrypt/decrypt on a separate piece of hardware. Where can the keys be stored? (Choose all that apply.)
- Local file system
- TPM v1.2 or later chip
- USB flash drive
- Network share
A: TPM v1.2 or later chip; USB flash drive
If wrong: When you encrypt the drive where the Windows operating system is installed, BitLocker must store the keys it uses to encrypt/decrypt on a separate piece of hardware. The keys can be stored on a Trusted Platform Module (TPM) version 1.2 (or later) microchip or on a removable USB flash drive.

Q: What administrative interface is provided for setting encryption policies, monitoring computers against those policies, and reporting the encryption status across your organization?
- Enterprise Encryption Administration
- BitLocker Enterprise Manager
- BitLocker Manager
- Microsoft BitLocker Administration and Monitoring
A: Microsoft BitLocker Administration and Monitoring

Q: Which versions of the Active Directory schema natively include the attributes required to support storing the BitLocker recovery information in Active Directory? (Choose all that apply.)
- Windows Server 2003 SP1
- Windows Server 2008
- Windows Server 2008 R2
- Windows Server 2012
A: Windows Server 2008; Windows Server 2008 R2; Windows Server 2012
If wrong: In Windows Server 2003 (SP1), the Active Directory schema has to be extended to support storing BitLocker recovery information. In Windows Server 2008, 2008R2, and Windows Server 2012, the schema already contains the attributes required.

Q: In addition to allowing BitLocker to check the validity of the encrypted volume in a computer, what other features does using the TPM chip provide? (Choose all that apply.)
- Ensures that the boot files and boot manager has not been tampered with
- Ensures that the operating systems have not been tampered with
- Ensures that the BIOS has not been tampered with
- Ensures that the device recovery settings have not been tampered with
A: Ensures that the boot files and boot manager has not been tampered with; Ensures that the operating systems have not been tampered with
If wrong: The TPM chip enables BitLocker to enhance security by checking the validity of not only the encrypted volume but also your boot files, boot manager, and operating system files to make sure they have not been tampered with while the operating system was offline.

Q: What benefit does print spooling provide?

Q: What new feature in Windows 8 and Windows Server 2012 allows users to connect to a shared printer without having to install the printer driver software?

Q: What must you install on your Windows 8 computer to allow managing shared printers in your network without logging in to the print server?

Q: When configuring offline files, how often will your computer check for a slow network connection?

Q: What organization is responsible for the testing and verification of compatibility, reliability, and functionality of drivers for hardware devices?
- Windows Driver Verifier
- Windows Hardware Quality Labs
- Microsoft Hardware Quality Labs
- Microsoft Driver Validator
A: Windows Hardware Quality Labs

Q: When a device is having a problem and may not be installed properly, what icon will be displayed for it in the Device Manager?
- Red "X"
- Black exclamation point on yellow field
- Yellow warning symbol with exclamation point
- Blue "I" on white field
A: Red "X"

Q: Where are the certified drivers that ship with Windows 8 stored?
- %systemroot%\system32\driverstore
- %systemroot%\system\drivers
- %systemroot%\system23\driverstore
- %systemroot%\system\drivercache
A: %systemroot%\system32\driverstore

Q: You can use Group Policy to configure how Windows responds when a user tries to install device drivers that are not digitally signed. Which of the following options are not available for this configuration?
- Ignore
- Warn
- Sign
- Block
A: Sign

Q: How would a printer become listed as a Deployed Printer in the Print Management console?
- The printer has a share name configured for it
- The printer has a print queue configured for it
- The printer has been verified as being online by the print server
- The printer is managed by a Group Policy Object
A: The printer is managed by a Group Policy Object

Q: Which of the following role services are included in the Print and Document Services role? (Choose all that apply.)
- Distributed scan server
- XPS printing
- Internet printing
- Distributed fax server
A: Distributed scan server; Internet printing
If wrong: In addition to the Print Server role service, the Print and Document Services role includes the following services: Distributed scan server; Internet printing; Line Printer Daemon (LPD) service.

Q: When you sign into the Windows 8 computer with your Microsoft User account, the system will automatically sync many settings for you. Which of the following settings will not be synchronized?
- Browser (history, bookmarks, and favorites)
- Desktop personalization
- Documents
- Language preferences
A: Documents

Q: From what locations will a Windows 8 client get a printer driver when first connecting to a shared printer? (Choose all that apply)
- Print server
- WSUS
- Windows Update
- Local driver store
A: WSUS; Windows Update; Local driver store
If wrong: If the computer is running Windows 8, the driver will be downloaded from the local driver store, Windows Update, or Windows Server Update Services (WSUS). Users will not be prompted to provide credentials to install the driver but will see a printer installation indicator in their status bar. After the install is completed, the printer is ready to use.

Q: What Windows feature enables you to sync certain mobile devices?
- Mobile Device Sync
- Sync Center
- Device Sync Manager
- Sync Manager
A: Sync Center

Q: Printers that are connected to computers running which of the listed operating systems can be managed by the Print Management console? (Choose all that apply.)
- Windows Server 2003
- Windows XP
- Windows Server 2008
- Windows 2000
A: Windows Server 2003; Windows XP; Windows Server 2008; Windows 2000
If wrong: The Print Management snap-in manages multiple printers and print servers across your organization and migrates printers to and from other Windows print servers. This tool provides a single interface, enabling you to manage printers and printer servers running on Windows 2000, Windows XP, Windows Server 2003, Windows Server 2008, and Windows Server 2012.

Q: When configuring synchronization for offline files to occur when a trigger event happens, you have several options available to choose from. Which of the following is not one of those options?
- Sync when you log on to the computer
- Sync after a specified inactive period
- Sync when you lock Windows
- Sync when you restart Windows
A: Sync when you restart Windows

Q: Which of the following printer-related terms refers to the actual physical hardware that prints data?
- Print queue
- Print server
- Printer
- Print device
A: Print device

Q: What happens when an offline file has been changed locally and in the remote location since the last synchronization has occurred?
- The most recently changed version is kept
- You are prompted to choose a way to resolve the conflict
- Synchronization will fail for that file
- Both revisions are kept, and the oldest copy is renamed to include the date and time of the change
A: You are prompted to choose a way to resolve the conflict